rename specs to cumulusvpn<cc> and reprice premium to 20 FLUX/month

Spec/app naming: cumulus<cc> -> cumulusvpn<cc> (e.g. cumulusde -> cumulusvpnde)
so the Flux app name carries the brand. Updated the generator, templates,
register/scale/encrypt/validate script docs, the deploy test, and every client
that derives a country from the spec name (web specToCountryCode now strips the
`cumulusvpn` prefix; core-ts already takes country from the Flux location API).

Price: premium 4.5 -> 20 FLUX/month (still ~$0.99). Updated the gateway env in
the generator + plain template, the signed directory (re-signed), all three
client bundles, the public web directory, the landing page, and the docs.

Directory: re-signed directory.signed.json with the new spec names + price 20
using the canonical key (1e+42…). Unified all clients on that one key — mobile
previously pinned a different key (IhvN6…) and bundled a placeholder payment
address; web/mobile bundles + web/public now carry the identical signed
directory, and mobile's pinned CVPN_DIRECTORY_PUBKEY matches.

Left as-is: gateway internal *_test.go use 4.5 as an arbitrary price constant
for entitlement/parsing logic (self-consistent, not the real price). The
generated brand/marketing PNGs still render the old price — regenerate via
brand/generated/marketing/_build-marketing.py before store submission.

Verified: deploy 8/8, core-ts 46/46 (+build), web 24/24, desktop 11/11,
mobile 11/11, all typecheck+lint+format clean, directory signature valid.

Author: TheTrunk

brand/generated/marketing/_build-marketing.py

@@ -208,7 +208,7 @@ def screen_payment():
     return '''<div class="pay">
   <h3>Upgrade to full speed</h3>
   <div class="sub">Send FLUX with the exact message below. Every gateway unlocks your key within ~1 minute — no account needed.</div>
-  <div class="amount"><div class="big">4.5 FLUX</div><div class="usd">≈ $0.99 · 30 days</div></div>
+  <div class="amount"><div class="big">20 FLUX</div><div class="usd">≈ $0.99 · 30 days</div></div>
   <div class="qr"></div>
   <div class="field"><div class="lab">Pay to address</div><div class="val"><span>t1cUmuLus…9xVQ2f</span><span class="cp">Copy</span></div></div>
   <div class="field"><div class="lab">Message (required)</div><div class="val"><span>CVPN1:3QJmnh8vzBqoQpuTGD</span><span class="cp">Copy</span></div></div>

clients/core-ts/src/discovery.test.ts

@@ -25,11 +25,11 @@ function info(overrides: Partial<InfoResponse>): InfoResponse {
 describe('discoverGateways', () => {
   it('queries Flux + nodes, probes /v1/info, and returns verified gateways sorted by country then load', async () => {
     const routes: Record<string, Response> = {
-      'https://api.runonflux.io/apps/location/cumulusde': jsonResponse({
+      'https://api.runonflux.io/apps/location/cumulusvpnde': jsonResponse({
         status: 'success',
         data: [{ ip: '1.2.3.4:16127' }, { ip: '5.6.7.8' }],
       }),
-      'http://9.9.9.9:16127/apps/location/cumulusde': jsonResponse({
+      'http://9.9.9.9:16127/apps/location/cumulusvpnde': jsonResponse({
         status: 'success',
         data: [{ ip: '10.0.0.1' }],
       }),
@@ -48,7 +48,7 @@ describe('discoverGateways', () => {
       return res;
     };
 
-    const gateways = await discoverGateways(['cumulusde'], { nodes: ['9.9.9.9'], fetchImpl });
+    const gateways = await discoverGateways(['cumulusvpnde'], { nodes: ['9.9.9.9'], fetchImpl });
 
     expect(gateways.map((g) => `${g.country}:${g.ip}`)).toEqual([
       'AT:5.6.7.8', // country asc
@@ -58,21 +58,21 @@ describe('discoverGateways', () => {
     // port was stripped from the api.runonflux entry
     expect(calls).toContain('http://1.2.3.4:51821/v1/info');
     // node index was queried directly
-    expect(calls).toContain('http://9.9.9.9:16127/apps/location/cumulusde');
+    expect(calls).toContain('http://9.9.9.9:16127/apps/location/cumulusvpnde');
   });
 
   it('drops unreachable candidates', async () => {
     const fetchImpl: FetchImpl = async (input) => {
       const url = String(input);
-      if (url.endsWith('/apps/location/cumulusus')) {
+      if (url.endsWith('/apps/location/cumulusvpnus')) {
         return jsonResponse({ status: 'success', data: [{ ip: '1.1.1.1' }, { ip: '2.2.2.2' }] });
       }
       if (url === 'http://1.1.1.1:51821/v1/info') {
         return signedResponse(info({ country: 'US' }), signer);
       }
       throw new Error('connection refused');
     };
-    const gateways = await discoverGateways(['cumulusus'], { fetchImpl });
+    const gateways = await discoverGateways(['cumulusvpnus'], { fetchImpl });
     expect(gateways).toHaveLength(1);
     expect(gateways[0]!.ip).toBe('1.1.1.1');
   });
@@ -81,7 +81,7 @@ describe('discoverGateways', () => {
     const otherSigner = makeSignKeypair();
     const fetchImpl: FetchImpl = async (input) => {
       const url = String(input);
-      if (url.endsWith('/apps/location/cumulusde')) {
+      if (url.endsWith('/apps/location/cumulusvpnde')) {
         return jsonResponse({ status: 'success', data: [{ ip: '3.3.3.3' }] });
       }
       // Body is signed by otherSigner but advertises signer's pubkey → invalid.
@@ -94,7 +94,7 @@ describe('discoverGateways', () => {
         },
       });
     };
-    const gateways = await discoverGateways(['cumulusde'], { fetchImpl });
+    const gateways = await discoverGateways(['cumulusvpnde'], { fetchImpl });
     expect(gateways).toHaveLength(0);
   });
 });
@@ -125,8 +125,8 @@ describe('directoryVerify', () => {
     version: 1,
     updated: '2026-07-16T00:00:00Z',
     payment_address: 't1abc',
-    price_flux: 4.5,
-    specs: ['cumulusde', 'cumulusus'],
+    price_flux: 20,
+    specs: ['cumulusvpnde', 'cumulusvpnus'],
     seed_gateways: [{ ip: '1.2.3.4', country: 'DE', sign_pubkey: 'x' }],
   };
 

clients/core-ts/src/discovery.ts

@@ -64,7 +64,7 @@ async function probe(ip: string, fetchImpl: FetchImpl): Promise<GatewayInfo | nu
  * country and sorted by load (ascending) so the caller can pick the least-busy
  * gateway in a given country.
  *
- * @param specNames - Flux app-spec names, e.g. `["cumulusde", "cumulusus"]`.
+ * @param specNames - Flux app-spec names, e.g. `["cumulusvpnde", "cumulusvpnus"]`.
  * @param options - Optional extra Flux nodes and a custom fetch implementation.
  * @returns Verified gateways, grouped by country and sorted by load.
  */

clients/core-ts/src/enroll.test.ts

@@ -15,7 +15,7 @@ const enrollData: EnrollResponse = {
   dns: '1.1.1.1',
   payment_address: 't1abc',
   payment_memo: 'CVPN1:2RkUfDC55GMndKreXqK7Jruu8Snx',
-  price_flux: 4.5,
+  price_flux: 20,
 };
 
 describe('enroll', () => {

clients/core-ts/src/paymentCode.test.ts

@@ -37,8 +37,8 @@ describe('paymentMemo', () => {
 describe('walletDeepLink', () => {
   it('builds the flux: URI exactly per contract', () => {
     const memo = paymentMemo(ZERO_PUB);
-    expect(walletDeepLink('t1abc', 4.5, memo)).toBe(
-      `flux:t1abc?amount=4.5&message=CVPN1:${ZERO_CODE}`,
+    expect(walletDeepLink('t1abc', 20, memo)).toBe(
+      `flux:t1abc?amount=20&message=CVPN1:${ZERO_CODE}`,
     );
   });
 });

clients/desktop/src/lib/directory.test.ts

@@ -28,7 +28,7 @@ describe('BUNDLED_DIRECTORY', () => {
   });
 
   it('lists a spec per fleet country', () => {
-    expect(BUNDLED_DIRECTORY.specs).toContain('cumulusde');
+    expect(BUNDLED_DIRECTORY.specs).toContain('cumulusvpnde');
     expect(BUNDLED_DIRECTORY.specs.every((s) => s.startsWith('cumulus'))).toBe(true);
   });
 });

clients/desktop/src/lib/directory.ts

@@ -20,8 +20,21 @@ export const BUNDLED_DIRECTORY: Directory = {
   version: 1,
   updated: '2026-07-01T00:00:00Z',
   payment_address: 't1PLACEHOLDERpaymentAddressREPLACEatRelease0',
-  price_flux: 4.5,
-  specs: ['cumulusde', 'cumulusus', 'cumulusnl', 'cumulussg', 'cumulusuk'],
+  price_flux: 20,
+  specs: [
+    'cumulusvpnau',
+    'cumulusvpnbr',
+    'cumulusvpnca',
+    'cumulusvpncz',
+    'cumulusvpnde',
+    'cumulusvpnfr',
+    'cumulusvpngb',
+    'cumulusvpnjp',
+    'cumulusvpnnl',
+    'cumulusvpnpl',
+    'cumulusvpnsg',
+    'cumulusvpnus',
+  ],
   seed_gateways: [
     { ip: '203.0.113.10', country: 'DE', sign_pubkey: '' },
     { ip: '203.0.113.20', country: 'US', sign_pubkey: '' },

clients/desktop/src/lib/session.test.ts

@@ -98,7 +98,7 @@ describe('establish', () => {
     dns: '10.8.0.1',
     payment_address: 't1addr',
     payment_memo: 'CVPN1:code',
-    price_flux: 4.5,
+    price_flux: 20,
   };
 
   it('enrolls the key, pins the gateway sign key, and brings the tunnel up', async () => {

clients/mobile/src/data/directory.json

@@ -1,21 +1,21 @@
 {
   "version": 1,
-  "updated": "2026-07-16T10:59:43Z",
-  "payment_address": "t1exampleADDRESSxxxxxxxxxxxxxxxxxx",
-  "price_flux": 4.5,
+  "updated": "2026-07-17T14:12:07Z",
+  "payment_address": "t3disq3aZz8K3RLZL9zfkpP2UWNVV3hq4vZ",
+  "price_flux": 20,
   "specs": [
-    "cumulusau",
-    "cumulusbr",
-    "cumulusca",
-    "cumuluscz",
-    "cumulusde",
-    "cumulusfr",
-    "cumulusgb",
-    "cumulusjp",
-    "cumulusnl",
-    "cumuluspl",
-    "cumulussg",
-    "cumulusus"
+    "cumulusvpnau",
+    "cumulusvpnbr",
+    "cumulusvpnca",
+    "cumulusvpncz",
+    "cumulusvpnde",
+    "cumulusvpnfr",
+    "cumulusvpngb",
+    "cumulusvpnjp",
+    "cumulusvpnnl",
+    "cumulusvpnpl",
+    "cumulusvpnsg",
+    "cumulusvpnus"
   ],
   "seed_gateways": [
     {
@@ -24,6 +24,6 @@
       "sign_pubkey": "REPLACE_GATEWAY_ED25519_PUBKEY_B64"
     }
   ],
-  "sign_pubkey": "IhvN6OfPIjw1y+I+zK3Z/63gsgL1qEt7f8M9UZqRzIU=",
-  "sig": "6hw21bXnG05i2Un5lvFd47GbV6XlMVTd8nnqSGfZguUd+P/nTXG0VmDa+j21ICgkesC8zo6s0f3RjqHvBqIKAg=="
+  "sign_pubkey": "1e+42nEpmdjf/cAHs+yE2E2iwmAADpWiLy1VMepsKKw=",
+  "sig": "TsQTer0bKqMjb0mUZGKwwy5Lr0bDVaUKXynxZRoCJKk3Ps7D4Q/AREEgAZWuTT6Ob7SZQmRpf8ARwo4rK9LHAA=="
 }

clients/mobile/src/lib/directory.ts

@@ -18,7 +18,7 @@ import bundled from '../data/directory.json';
  * Pinned directory Ed25519 public key (`CVPN_DIRECTORY_PUBKEY`), base64.
  * Baked into the binary; the whole trust chain hangs off this constant.
  */
-export const CVPN_DIRECTORY_PUBKEY = 'IhvN6OfPIjw1y+I+zK3Z/63gsgL1qEt7f8M9UZqRzIU=';
+export const CVPN_DIRECTORY_PUBKEY = '1e+42nEpmdjf/cAHs+yE2E2iwmAADpWiLy1VMepsKKw=';
 
 /** The bundled snapshot, typed as the core `Directory`. */
 export const bundledDirectory: Directory = bundled as Directory;